Closed gperezivo closed 3 years ago
Nevermind, I dont type correctly the secrets-store-csi-driver.syncSecret.enabled=true
option...
I resolve reading... https://azure.github.io/secrets-store-csi-driver-provider-azure/troubleshooting/#failed-to-create-kubernetes-secret-errsecrets-is-forbidden-user-systemserviceaccountdefaultsecrets-store-csi-driver-cannot-create-resource-secrets-in-api-group--in-the-namespace-default
What steps did you take and what happened: I created a SecretProviderClass with secretName referencing an Azure Key Vault secret using pod identity:
When I try to refer the secret in a pod env variable, I get an error: secret "kv-secret" not found
The pod identity it's working and when I remove the environment variable the store inline mounts correctly and fill the values from Key Vault.
I found an error on csi-driver pod:
What did you expect to happen: Read an environment variable from Azure Key Vault (?)
Anything else you would like to add: I'm using Azure Kubernetes Services with Kubernetes 1.20.7 I tried to install with parameters --set syncSecret.enabled=true --set rbac.install=true but fails too on pod deploy.
Which provider are you using: Azure Key Vault
Environment:
kubectl version
): Client Version: version.Info{Major:"1", Minor:"21", GitVersion:"v1.21.2", GitCommit:"092fbfbf53427de67cac1e9fa54aaa09a28371d7", GitTreeState:"clean", BuildDate:"2021-06-16T12:59:11Z", GoVersion:"go1.16.5", Compiler:"gc", Platform:"linux/amd64"} Server Version: version.Info{Major:"1", Minor:"20", GitVersion:"v1.20.7", GitCommit:"4a4913e790a033f1101af2f0fb7be189b106e3ae", GitTreeState:"clean", BuildDate:"2021-05-25T17:37:03Z", GoVersion:"go1.15.12", Compiler:"gc", Platform:"linux/amd64"}